});

});

it("rejects invalid arm durations without mutating phone control", async () => {

await withRegisteredPhoneControl(async ({ command, writeConfigFile }) => {

const typoRes = await command.handler({

...createCommandContext("arm writes forever"),

channel: "webchat",

gatewayClientScopes: ["operator.admin"],

});

const overflowRes = await command.handler({

...createCommandContext("arm writes 9007199254740993d"),

channel: "webchat",

gatewayClientScopes: ["operator.admin"],

});

expect(typoRes?.text ?? "").toContain("Invalid duration");

expect(overflowRes?.text ?? "").toContain("Invalid duration");

expect(writeConfigFile).not.toHaveBeenCalled();

});

});

it("allows external owner callers without gateway scopes to mutate phone control", async () => {

await withRegisteredPhoneControl(async ({ command, writeConfigFile }) => {

const res = await command.handler({

}

const unit = m[2];

const mult = unit === "s" ? 1000 : unit === "m" ? 60_000 : unit === "h" ? 3_600_000 : 86_400_000;

return n * mult;

const durationMs = n * mult;

return Number.isSafeInteger(durationMs) ? durationMs : null;

}

function formatDuration(ms: number): string {

if (!group) {

return { text: `Usage: /phone arm <group> [duration]\nGroups: ${formatGroupList()}` };

}

const durationMs = parseDurationMs(tokens[2]) ?? 10 * 60_000;

const durationMs = tokens[2] === undefined ? 10 * 60_000 : parseDurationMs(tokens[2]);

if (durationMs === null) {

return { text: "Invalid duration. Use values like 30s, 10m, 2h, or 1d." };

}

const expiresAtMs = Date.now() + durationMs;

const commands = resolveCommandsForGroup(group);